403 PERMISSION_DENIED – VALIDATION_REQUIRED

[heysurfer]

Pre-submission checklist

• I have searched existing issues for duplicates
• I have read the 📋 Troubleshooting Guide
• I have read the README installation instructions

Model used

Not applicable

Exact error message

[2026-01-30T21:54:36.249Z] [Antigravity Debug ANTIGRAVITY-72] Response Body (403): {
  "error": {
    "code": 403,
    "message": "To continue, verify your account at\n\nhttps://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser\n\nLearn more\n\nhttps://support.google.com/accounts?p=al_alert\n", 
    "status": "PERMISSION_DENIED",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.ErrorInfo",
        "reason": "VALIDATION_REQUIRED",
        "domain": "cloudcode-pa.googleapis.com",
        "metadata": {
          "validation_message_description": "To continue, verify your account at",
          "validation_url_link_text": "Verify your account",
          "validation_learn_more_link_text": "Learn more",
          "validation_learn_more_url": "https://support.google.com/accounts?p=al_alert",
          "validation_error_message": "To continue, verify your account at\n\nhttps://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser\n\nLearn more\n\nhttps://support.google.com/accounts?p=al_alert\n", 
          "validation_url": "https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser" 
        }
      },
      {
        "@type": "type.googleapis.com/google.rpc.Help",
        "links": [
          {
            "description": "To continue, verify your account at",
            "url": "https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxxx&flowName=GlifWebSignIn&authuser" 
          },
          {
            "description": "Learn more",
            "url": "https://support.google.com/accounts?p=al_alert"
          }
        ]
      }
    ]
  }
}

Bug description

Current Behavior

• Plugin keeps retrying the same account
• Causes unnecessary request spam
• All Antigravity calls fail until manual verification

Steps to reproduce

Did this ever work?

Not sure

Number of Google accounts configured

4+

Reproducibility

Always (100%)

Plugin version

OpenCode version

Operating System

Node.js version

Environment type

Standard (native terminal)

Debug logs (REQUIRED)

[2026-01-30T21:54:36.249Z] [Antigravity Debug ANTIGRAVITY-72] Response Body (403): {
  "error": {
    "code": 403,
    "message": "To continue, verify your account at\n\nhttps://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser\n\nLearn more\n\nhttps://support.google.com/accounts?p=al_alert\n", 
    "status": "PERMISSION_DENIED",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.ErrorInfo",
        "reason": "VALIDATION_REQUIRED",
        "domain": "cloudcode-pa.googleapis.com",
        "metadata": {
          "validation_message_description": "To continue, verify your account at",
          "validation_url_link_text": "Verify your account",
          "validation_learn_more_link_text": "Learn more",
          "validation_learn_more_url": "https://support.google.com/accounts?p=al_alert",
          "validation_error_message": "To continue, verify your account at\n\nhttps://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser\n\nLearn more\n\nhttps://support.google.com/accounts?p=al_alert\n", 
          "validation_url": "https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxx&flowName=GlifWebSignIn&authuser" 
        }
      },
      {
        "@type": "type.googleapis.com/google.rpc.Help",
        "links": [
          {
            "description": "To continue, verify your account at",
            "url": "https://accounts.google.com/signin/continue?sarp=1&scc=1&plt=xxxxxx&flowName=GlifWebSignIn&authuser" 
          },
          {
            "description": "Learn more",
            "url": "https://support.google.com/accounts?p=al_alert"
          }
        ]
      }
    ]
  }
}

Configuration (optional)

Compliance

• I'm using this plugin for personal development only
• This issue is not related to commercial use or TOS violations

Additional context

Expected / Suggested Behavior

When this response is detected:

• Mark the account as disabled / verification_required
• Stop retrying with the same account
• Automatically switch to another available account

[github-actions]

👋 Thanks for opening this issue!

This is a valid enhancement request. Currently, the plugin does not specifically handle the VALIDATION_REQUIRED error type from Google's ErrorInfo. When this error occurs, the account needs manual verification via the provided URL, but the plugin continues retrying with the same account.

Technical details:
The plugin already parses google.rpc.ErrorInfo details in extractRateLimitBodyInfo() but only handles rate limit reasons (QUOTA_EXHAUSTED, RATE_LIMIT_EXCEEDED, MODEL_CAPACITY_EXHAUSTED). The VALIDATION_REQUIRED reason needs to be added to trigger account disablement and rotation.

Implementation approach:

1. Add VALIDATION_REQUIRED detection in the error parsing logic
2. Extend CooldownReason type to include "verification-required"
3. Call markAccountCoolingDown() with an extended cooldown period when this error is detected
4. The existing account rotation logic will automatically skip cooling-down accounts
5. Consider showing a toast notification to inform the user which account needs verification

This would improve the multi-account experience by automatically routing around accounts that need manual intervention, rather than spamming requests that will fail.

---

This is an automated response. A maintainer will review your issue soon.

[Sagit-chu]

+1

[Neison32]

+1 and even after manual verification, issue remains